[论文解读] A Secure and Efficient Approach for Issuing KYC Token As COVID-19 Health Certificate Based on Stellar Blockchain Network

Kiarash Shamsi, Koosha Esmaielzadeh Khorasani+1 more|arXiv (Cornell University)|Oct 5, 2020

Blockchain Technology Applications and Security被引用 1

一句话总结

本文提出了一种基于区块链的安全系统，利用Stellar网络发行并验证KYC代币作为数字COVID-19健康证明。通过利用区块链的不可篡改性、端到端加密以及代币化访问机制，用户可在一个高效、单一的交易中安全地与可信实体共享经验证的检测结果，降低费用并增强隐私保护，同时实现可审计性和未来大流行病的可扩展性。

ABSTRACT

Today's world is struggling with the COVID-19 pandemic, as one of the greatest challenges of the 21st century. During the lockdown caused by this disease, many financial losses have been inflicted on people and all industries. One of the fastest ways to save these industries from the COVID-19 is to provide a reliable solution for people's health assessment. In this article, blockchain technology is used to propose a model which provides and validates the health certificates for people who travel or present in society. For this purpose, we take advantage of blockchain features in protecting people's privacy. Since a variety of antibody and human health proving tests against the virus are developing, this study tries simultaneously to design an integrated and secure system to meet the authenticity and accuracy of different people's health certificates for the companies requiring these certifications. In this system, on the one hand, there are qualified laboratories that are responsible for performing standard testing and also providing results to the system controller. Finally, people are considered as the end-user of the system. To provide test information for the entities, the mechanism of KYC tokens will be used based on the Stellar private blockchain network. In this mechanism, the user will buy a certain amount of KYC tokens from the system controller. These tokens are charged in the user's wallet, and the user can send these tokens from his wallet to any destination company, to exchange the encrypted health certificate information. Finally, considering the appropriate platform provided by blockchain technology and the requirement of a reliable and accurate solution for issuing health certificates during the Covid-19 pandemic or any other disease, this article offers a solution to meet the requirements.

研究动机与目标

• 为应对新冠疫情下对可靠、快速且保护隐私的健康证明发行与验证方法的迫切需求。
• 通过启用可重复使用的、经区块链验证的健康数据，减少个人和组织的重复验证成本，提升效率。
• 设计一个可扩展、防篡改的系统，支持未来超越COVID-19的应用场景，如HIV或其他疫情应对。
• 通过密码学哈希和区块链的不可篡改性，确保数据完整性、机密性和可审计性。
• 通过代币转售机制激励接收方企业参与，构建可持续的生态系统。

提出的方法

• 系统使用Stellar私有区块链网络，将KYC代币作为加密健康证明哈希的数字表示进行发行和管理。
• 用户一次性向中央控制器注册，其钱包将收到KYC代币，并可将这些代币发送至可信的接收方企业。
• 每次代币交易均包含一个备忘录，其中包含用户加密健康数据的密码学生哈希，由链下服务器进行验证。
• 仅当接收方企业为预期接收者时，才会使用其私钥解密数据，从而确保保密性和访问控制。
• 系统将链上操作（代币转移与不可篡改性）与链下存储（加密健康记录和身份管理）分离。
• 接收方企业可按原始价格的20%转售代币，从而为参与提供经济激励，并减少代币通货膨胀。

实验结果

研究问题

• RQ1 如何利用区块链技术在疫情期间以安全、高效且保护隐私的方式发行和验证数字健康证明？
• RQ2 在去中心化的健康验证系统中，哪些机制可确保数据的不可篡改性、真实性和机密性？
• RQ3 可重复使用的代币化系统如何减少多个组织间重复验证的成本并提升可扩展性？
• RQ4 何种激励机制可维持接收方企业在健康证明验证网络中的长期参与？
• RQ5 基于区块链的系统在多大程度上可支持超越COVID-19范围的未来疫情应对？

主要发现

• 所提出的系统利用Stellar网络上的基于区块链的KYC代币，实现了健康证明的自动化、安全且快速的发行与验证。
• 系统通过区块链的分布式账本和健康数据的密码学生哈希，确保了数据的不可篡改性和完整性。
• 用户可使用单一、可重复使用的代币，向多个实体共享其健康信息，显著减少了重复验证的工作量。
• 系统通过仅在链上存储加密数据的哈希引用、将实际数据离链存储，有效保护了用户隐私。
• 接收方企业可从接收的代币中获得20%的转售价值，形成了可持续的经济模型，从而鼓励其参与。
• 该架构支持公有和私有部署，对于敏感医疗数据，推荐使用私有模式以确保合规性和安全性。